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o ; 1 Introduction 

D 

Q . In elliptic curve cryptosystems, it is important to construct elliptic curves with a 

^ ! required number of points over finite fields. The theory of complex multiplication leads 

an approach to the construction of elliptic curves over finite fields. When we construct 



elliptic curves, we often make use of the class polynomial of J-invariant function. 
However, this method has the problem on practical use that the coefficients of the 
polynomial grow very large. To overcome the problem, the polynomials with small 
coefficients have been invented by using Weber functions. Recently, Enge and Schertz 
p] gave the method of using the double r^-quotient. The double //-quotient is not 
SL2(Z)-invariant but r°(A^)-invariant. For this reason, they considered A^-systems and 
calculated class polynomials with respect to double r^-quotients. Furthermore, they 
can calculate the modular invariants J(a), for an ideal a of an imaginary quadratic 
field, by using the modular polynomial from the class polynomials with respect to 
! double ?7-quotients. However in their method, it is necessary to count the number of 

I rational points of elliptic curves corresponding to solutions of the modular equation 

CN ■ over a finite field, because in advance we can not know which solution of the modular 

equation is that corresponding to the modular invariant. In this article, we shall 
O ■ give a method to reduce the amount of computation in the process of counting the 

number of rational points. Thus, if we are in the situation that the modular invariant 
is a multiple root of the modular polynomial, we may expect that the amount of 



>< 



^ ■ computation reducers to at most a half of the original one. In Section 2, we give some 

^ basic results and definitions. In Section 3, we determine the relations between class 

polynomials with respect to double r^-quotients and A^-systems. In Section 4 , we give 
a condition that the modular invariant is a multiple root of the modular polynomial. 
In section 5, we give an example. 

2 Some basic results and definitions 

For two prime numbers pi and p2, the double ?7-quotient ^pi,p2{z) of level = piP2 
is defined by 

^ ^ Viz/pi)T]{z/p2) 
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where ri{z) denotes the Dedekind r^-function defined by 



oo 



n=l 

The function X0p^^p^{z) is invariant under the modular group 

6 = (mod N) 
(see For a divisor Q oi N such that (<5, = 1, set 

where x, y G Z and det(iyQ) = Q. Then we know Wq is a normahzer of T^{N). 
Especially the normalizer Wn = \ ^ called the Atkin-Lehner involution of 



^-1 0^ 

T^{N). By Theorem 2 of [2J, we know 

'^vi,P2{Wn{z)) = VOp,,p,{z). (2.1) 

For ^p^^p^{z) with s = 24/ gcd(24, (pi — l)(p2 — 1)), Enge and Schertz defined the 
class polynomials H<yi{X) associated with A^-systems DT. In the following, we shall 
recall their results. Let Of he the order of conductor / in a imaginary quadratic field 
K = Q,{^/rn). Let be a discriminant of K. Then the discriminant D of Of is 
given hj D = pdk- Let ^/ be the (proper) ideal class group of Of. To a proper ideal 
a = [/3i,/52] = ZPi + Z/?2 of Of, we associate its basis quotient 



aa=^ (a„ G e = {r G C I /m(r) > 0}) 

P2 



and a quadratic form q(i(X, y) = Nk/q{PiX + /52l')/A"/^/Q(a). It is noted that the 
basis quotient is determined up to SL2(Zi)-equivalence and the form qa{X,Y) is a 
primitive quadratic form with integral coefficients of discriminant D. The following 
results are well known (see ^). 

Let tti and 02 are proper ideals of Of. We write ai ~ 02 if Oi and 02 are in the 
same ideal class of Of. Then 

ai ~ 02 <^=^ is SL2(Z)-equivalent to 

<^=^ c[ai{X, y) is proper equivalent to qa2(-^5 (2-2) 



Further the map a 1— > qa{X,Y) gives rise to a bijection between S)f and the proper 
equivalent classes of quadratic forms of discriminant D. Since for an ideal a the value 
J(aa) is independent on the choice of basis quotients we shall denote by J(a) 
the value J{aa). Hereafter for a triple {A,B,C) of integers such that A 7^ 0, we 
shall denote by [A, B,C] a. quadratic form AX^ + BXY + CY^. Furthermore, for a 
quadratic form q = [A,B,C], we put Oq = [A, ~-^+^ ] and = '^^/^ ■ Let h{D) 
be the class number of the order Of. Then we know there exist h{D) isomorphic 
classes of elliptic curves with complex multiplication hy Of. They are represented 
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by the elliptic curves with j-invariants j{aa^), where Oj (z = 1, . . . , h{D)) are ideals 
representing all classes of S)f. Let Kf be the ring class field of K of conductor /. 
Then the theory of complex multiplication shows J(aj) generates Kf over K for each 
i and J(aj), (i = 1, . . . , h{D)) are conjugate to each other over Q. To calculate the 
values J(a), we use the classical class equation for the order Of defined by 

h{D) 

Hn[J]{X) = lliX - J{a.)). 

i=l 

However, since this polynomial has large integral coefficient, it is hard to compute the 
polynomial for large D^s. Enge and Schertz [Ij devised the method of using the double 
?7-quotient to obtain a class polynomial with small integral coefficients. Since double 
?7-quotient is r''(A^)-invariant but not SL2(Z)-invariant, the values XVp_^ p^{aa) depend 
on the choice of ideals a in an ideal class. Therefore to define a class polynomial for 
'^pi,P2' must use the A^-systems introduced by Schertz [5j. 

Definition 2.1. Let ^ be a set of h{D) primitive quadratic forms [Ai, Bi,Ci] of dis- 
criminant D. we say ^ an N -system for D if quadratic forms [Ai, Bi, Ci] satisfy the 
following conditions: 

1. gc(l{Ai,N) = l,Bi = Bj (mod 2N), N\Ci for every i,j, 

2. the ideals [Ai, ~'^'+^ ] form a representative system of 9jf. 

The following result is basic for A^-systems. See Theorems 3.1, 3.2 of [Ij. 
Theorem 2.2. Assume prime numbers pi and p2 satisfy the following conditions: 

1. Ifp,^p2, then (i^),(i^)^-l, 

2. if Pi =P2=P, then either (-p) = 1 orp\f. 

Then there exists an N-system Dl = {q^} for D . Further ^p-^p^{(^qi) G Kf for every 
i and tt)p^ ^^('^qJ conjugate under G{Kf/K) to each other. 

Now the class polynomial of tt)p^ associated with an A^-system 91 is defined by 

h(D) 

1=1 

By Theorem 12. 2^ we have H<ji{X) G Further Corollary 3.1 of [IJ gives 

Corollary 2.3. Suppose that following conditions hold: 
1- IfPi^P2, then (^), (^) ^ -1, andpi,p2\f; 

2. ifp^ =p^=p^2, then (^) = 1 orp\f; 

3. ifp^ =P2 = 2, then (f ) = 1, or 2\f, but D ^ A (mod 32). 
Then H^{X) E Z[X]. 
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To obtain modular invariants J(aq) from the singular values XVp_^ p^{ac^), we use a 
modular polynomial $pi,p2 that associates tVp-^^p^ with J, which is defined as follows. 

Definition 2.4. 

o-e/so(CpO(iv)/'Cr) 

where Cro(Ar) anc? Cr denote the modular function field of r°(A^) and T = SL2(Z) 
respectively. 

We know that ^p^^p^{X,J) G Z[X, J] and $ 

pi,P2(^5'^) is minimal polynomial of 
^pi P2 '^('^) by Theorems 7 and 8 by [2]. To obtain elliptic curves with complex 
multiplication hj Of over finite field Fg of g-elements, the polynomials H<yi[X) and 
^pi,P2(-^! J) are used in the following algorithm. 

Assume that g is a prime number which splits completely in Kj. 

Algorithm 2.5. 1. Construct an N-system {c{i}. 

2. Compute tVp^ p^{ac^-) and H<yi{X). 

3. Compute a roots W of H<xi{X) mod q. 

4- Compute ¥g-rational roots Jk of $p^,p2(rD, J) mod q. 
5. Output the desired J -invariant among J^. 

In step 5, it is necessary to count the number of Fg-rational points of each elliptic 
curve Ek with the j-invariant Jk to determine which elliptic curve has complex 
multiplication by Of. In step 4, if p^l*^, J) mod q has the degree 2 in J and the 
multiple root J in J, then it is not necessary to count the number of rational points. 
Accordingly, we will consider the condition that the polynomial has the multiple root 
in Section m 

3 A^-systems and class polynomials 

In this section, we study the relation between the class polynomials and A^-systems. 



Lemma 3.1. Let {[Ai, Bi,Ci]} and {[A'-,B'-,C'j]} be N -systems for D. Suppose that 
[Ai,Bi,Ci] and [A[,B'^,C'j] are proper equivalent. Then ~^2A^ ^'^ T^{N) -equivalent 
to ^2A'^ '^f ^'^^^ '^f = ^'i 2A^). In particular, if Bi = B[ (mod 2A^), 

i 

then 



B, + VD^ „ ,-B' + VD 



pi,P2\ 2 A- pi.P2^ 2A'- 
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Proof. Since [Ai, Bi, Ci] and [A'j, i?,-, C-] are proper equivalent, there exists a matrix 
M = ^ ^ ^ G SL2(Z) such that 

We have only to prove M e T°{N) if and only if Bi = B[ (mod 2A^). By ([HI]), we 
have 

BiB'^c-2A'-B,d + Dc = -2AiB'-a + AAiA'Jj, (3.2) 
-BiC- B'iC + 2A'id = 2Aia. (3.3) 

By substituting (13.31) into (13. 2p . we obtain 

Aia{B'i - Bi) - 2AiCiC = 2AiA'ib. (3.4) 

Since gcd{AiA[, N) = 1 and N\Ci, we have a{B'. - Bi) = 2A[h (mod 2N). There- 
fore M e V^{N) if and only if Bi = B[ (mod 2A^). □ 

The following result is deduced from Proposition 3 of [5]. 

Proposition 3.2. Let [A, B, C] be a primitive quadratic form of discriminant D such 
that A > 0,gcd(y4^A^) = 1 and N\C . Then there exists an N -system for D con- 
taining [A, B, C]. In particular, for an integer B such that B^ = D (mod 4A^), there 
exists an N -system for D containing [1, B, (5^ — D)/4]. 

By Proposition 13.21 and Lemma 13. 1[ we know the class polynomials of double t]- 
quotient associated with iV-systems depend only on integers B, considered mod 2N, 
such that B^ = D (mod 4A^). Thus, hereafter, we shall denote by Hb,n{X) the class 
polynomial H<yi{X) associated with an iV-system containing a form [1,5,(5^ — 
D)/4]. In the following, we shall fix an iV-system containing {B"^ — D)/4] and 

shall denote it by 

Lemma 3.3. Assume that pi and p2 are odd primes. Let N{D) be the number of 
integers B mod 2N such that B"^ = D ( mod 4A'^). Then 

(4 if (^) = 1 and (^) =1, 
\2 ^f (i^) = l and {^)=0. 



Proof. Let us consider the case (^) = 1 and (-^) = 1. Then there exists an integer 
Oi such that of = D (mod p.,) for i = 1,2. By Chinese reminder theorem, we see 
B"^ = D (mod 4A^) if and only if 

B = D (mod 2), (3.6) 
B = ±ai {mod Pi) (i = l,2). (3.7) 

This shows N{D) = 4. The remaining case can be treated similarly. Thus we omit 
the details. □ 
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If N is odd, we obtain at most N{D) distinct class polynomials of the double 
ry-quotient associated with A^-systems for D. 

Lemma 3.4. Let B he an integer such that = D (mod 4A^). Then H^b,n{X) = 
Hb,n{X). 



Proof. We know the g-expansion of ^l^^p^i.^) is rational, thus 
(see section 3 of [2J). Therefore we have 



and 



-B + VD\ , rB + VD 

Pl,P2\ 9 / Pl,P2 



Since Corollary 12.31 shows that Hb,d{X) G we have Hb,d{X) = Hb,n{X) = 

H-b,n{X). 

□ 

Theorem 3.5. Let N{Hj:)) be the number of distinct class polynomials Hb^n{X) os- 
sociated with N -systems. Then 

, ^ fl,2 if {-\ = \ and (-) = I, , , 

Proof. Lemmas l3.3l and [3.4l imply that N(Hn) < N{D)/2. Thus we have the assertion. 

□ 

In the case N{Hd) = 2, we have two class polynomials Hb,n{X) and Hb'^n{X), 
where B,B' are integers such that B^ = D (mod 4iV), B' = B (mod pi), B' = 
—B (mod p2)- We shall show Hb'^n{.X) is obtainable from Hb,n{X) by a simple 
transformation. We shall use the following transformation formula of the Dedekind 
77-function (see Theorem 1 of [2]). 

Theorem 3.6. Let M = ( ^ ^ ] & SL2(Z) be normalized such that c > 0, and 



c d 

d > if c = 0. Write c = 72'^ with 7 odd; by convention, 7 = A = 1 if c = 0. Then 



a \ ^a6+c((i(l-a2)-a)+37(a-l)+|A(a2-l) 
24 



r]{Mz) = e{M)Vcz + d7]{z) 

with 

9l(Vc^Trf) > 0, e(M) = 
Lemma 3.7. Let Wp^ = I 1 with y < 0, y = 1 (mod 2) and pix+p2y 

\ y pix J 

1. Then 
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Proof. By Theorem [3J 



«Pl,P2(W"pi(^)) = ^Pl,P2i. 



, AT / -piz+N \ f -piz+N 



-piz+N \^( -piz+N 

Here 



^ l\-yz~pxx' l^p^p^{-yz-pxx)l Pi,P2\ ) 



-y -PlX J W ~P2y -X J I _„ )^24l )S24 



) _ (4)^24(_p^2y)C2 



with 



a = -P2 - y + 37(-2), 

3 

6 = -Pi -P2l/(-a;(l -P?) + Pi) + 3p27(-Pi - 1) + 2-^(^1 ~ 1) 

3 

c = -PiP2-2/(-a;(l-p?)+Pi) + 37(-pi-l) + -A(pi-l), 
= -1 -p22/ + 3p27(-2). 
Therefore we see 

a + b - c - d = {1 - p2){l - pi){l - y - xy{pi + 1) - 37). 
Since s{pi — l){p2 — 1) = (mod 24), we have (e*)"* = 



)S24 



c—d 



Pi 
P2 



□ 



Proposition 3.8. Suppose that (^) = (£)=!. T/ien 



s 

£1 ■ 

P2 



Proo/. Let q = [A,B,C] be a form of the A^-system ^b- Put = ~^^+^ . We 
can write Wp^{aq) = We see easily that B' = B (modpi), B' = —B 

(modp2) and C = {B'^ - D)/AA = (mod A^). If gcd(v4',A^) > 1, then we 
shall show there exists an element 7 G r^{N) such that the first coefficient A" 
of the quadratic form [A",B",C"] corresponding to ■yWpj^i^a) is prime to A^. It 
is noted by the proof of Lemma 13.11 that B' = B" (mod 2A^) and N\C" . Since 
*T^Pi,P2(7W^Pi(«q)) = ^Pl,P2{Wpl{(x^)), we have 

By Lemma [3.7[ we have our result. Thus we have only to prove the existence of the 

f r N \ 

above 7 in the case A' is not prime to A^. Set 7 = ( ^ ^ 1 , for integers r, t. Then 
' (^Sa^) + ^ _ i-rB' - tB'N + 2A'N + 2rtC') + \fD 



t + 1 2{-tB' + A' + t'^C) 



Therefore we have A" = -tB' + A' + t^C . Since N\C' , we know gcd(A", A^) = 1 
if and only if gcd(-ti?' + A\N) = 1. Assume N\A'. Then gcd(D, A^) = 1 imphes 
[B', N) = 1. Therefore we can take r = A^+l, t = l. Next assume Pi\A' and pj \ A'. 
Then we have Pi \ B'. Therefore we can take r = pjN + 1, t = pj. This completes our 
proof. □ 



4 Multiple roots of modular equation 

In this section, we assume the conditions in Corollary 12.31 We shall study a condition 
that for singular values a of double //-quotients the polynomial $pj^p2(a, J) of J has 
a multiple root. 

Proposition 4.1. The polynomial ^p-^^p2{X, J) has degree H — ) a polyno- 

p\N P 

mial of J and has degree ^ ^'^ polynomial of X . For r G H, the 

equation ^pi,p2{^pi,p2{'^)^ J) = has two roots J{t) and J{Wn{t)). In particular, if 
J{t) = J{Wn{t)) , then the equation has a multiple root. 

Proof. The assertion concerning the degree follows from Theorem 9 of [2]. The equa- 
tion $pi,p2(*^pi,p2 (''")' ~ ^ obviously has the root J(r). Similarly, J(Wn{t)) is a 
root of %,,p2{rv;^,p2{WN{T)),J) = 0. By 1^^, we have rv;^^p^{WN{T)) = ra;,,p,(r). 
Therefore JiWNir)) is a root of $pi,p2(*i^pi,p2 (''")' -'^) = 0. □ 

Let q = [A, S, C] be a form of an A^-system DT^- Since 

, , N 2AN{B + VD) B + VD 

^^("^) - — iT^- — — "^(iT' 

2A 

the action of Wn on the ideal is given by WAr(aq) = ^^^ ] . 

Lemma 4.2. If we set as = [N, — ^y^], then WAr(aq) ~ a^aB- 
Proof Since {A,B,C) = 1, 

a^WNia,) = [A, ][-, ] 

,AC c.b + Vd. ^.b + Vd. ^.b + ^/d.^ 
T7i — 7, — J'^i — ^ — J'^i — 1^ — n 



' N ' 2 
AC B + y/D 
2 



2 ' 2 

Thus we have a^W^Ar(aq) ~ aqO^. Since o^Oq ~ 1, this proves the assertion. □ 

Proposition 4.3. Let q = [A,B,C] be a form of an N -system Then J(VFAr(aq)) 
= J(a;q) if and only if there exist u, f G Z such that 

-Dv^ = AN , , 

(4.1) 

u-Bv = (mod2A^). 
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Proof. By (12.21) and Lemma [4. 2[ we have 

J(H/jv(aq)) = J(Oq) ^ W^jv(aq) ~ aq 

~ 1. 

Further we know the condition a_B ~ 1 is equivalent to the existence of an element 
^ y \ e SL2(Z) such that 



z w 



2N ^(^B±^)+^- 

Let us assume (14. 2p . Then we have 

zB^ + zD -2wB = -2xNB + 4:Ny, (4.3) 
w = xN + zB. (4.4) 

By substituting (14. 4p into (14.31) . we have y = —Aj^z. Therefore, from xw — yz = 1, we 
obtain {Bz + 2xN)'^ — Dz^ = 4N. Now, we put u = Bz + 2Nx, v = z. Then we have 
— Dv^ = AN and x = Further, since x G Z, we have u — Bv = (mod 2A^). 

Conversely, let u,v be integers satisfying (14.11) . Put x = y = —Ajj:V, z = v and 

w = xN + zB. Then we have xw — zy = 1 and (14. 2p . 

□ 



Immediately from Proposition 14.31 we obtain 
Corollary 4.4. // J(Vr^(aq)) = J(Oq), then D > -AN. 

Proof. The condition (O) shows D = > -AN. □ 

Proposition 4.5. Assume that there exist integers u and v satisfying (14. ip . T/ien 
t/ie equation '^'pi,p2(*^pi,p2('^q)' = ^'^■^ « multiple root ^(flq)- 

Proof. The assertions is obvious. □ 
By a similar argument in Proposition 14.31 we have: 

Proposition 4.6. Let the notation he as in Proposition^^ Then VFiv^(a) ~ a if and 
only if there exist integers X, Y such that Y ^ Q and 

- DY^ = AN^ 
X -BY = (mod 2N) 
M)2^1 (modF). 

Theorem 4.7. Let Oq. {i = 1, . . . , h{D)) be the ideals associated with the quadratic 
forms qi = [Ai,Bi,Ci] of^B- Then 

J{aJ = JiW^iaJ) ^ J{aJ = JiW^iaJ) = 1, . . . ,h{D)). 
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Proof. We set ae, = [N, -^'+^ ]. Since Bi = Bi (mod 2iV), we know 

-B, + Vd ^ 

Consequently, by Lemma [4.21 

J(oi) = JiW^iai)) ^ ~ (1) ^ a,B ~ (1) ^ J(a,) = J(H^;v(ai)). 

□ 

Corollary 4.8. Let i be a prime number which splits completely in Kf. Let B be 
an integer such that there exist u and v satisfied with (14. ip . Further let be the 
N-system determined by B . Then for any q G 91^, the polynomial ^p^^p^{X, J) has a 
multiple root J(aq) over¥i. 

Proof. Our assertion follows from Proposition 14.31 and Theorem 14. 7[ □ 

Finally, we give a result for the decomposition of $pj^p2(X, J(o)) for an ideal a 
over finite fields. 

Proposition 4.9. Assume that pi and p2 satisfy the condition 1 of Corollary {KM Let 
£ be a prime number which splits completely in Kf. Let a be an ideal ofOf. Then the 
polynomial ^p^^ p^^X, J(a)) mod i has at least four linear factors over F^. 

Proof. By Lemmas 13. Il andl 3. 31 we know in the ideal class of a there exist four forms qs 
of iV-systems for four distinct B (mod 2A^), B^ = D (mod 4A^) . By Theorem [221 
we have ttJp^p^lo^qs) integers of Kf. Therefore we have our assertion. □ 



5 Example 



We give an example for the result given in Corollary 14.81 Let D = —56 and = 39. 
The integer B = 10 satisfies B^ = D (mod 4A^). Consider the iV-system DTs. For 
the integer B, there exist m, f G Z that satisfy (14. ip . For instance, we can take 
u = 10,v = l. 

The modular equation $3 i3(X, J) and the class polynomial Hb,n{X) are given as 
follows. 

3 i3(X, J) = + (704 - J)X^^ + (168568 + 39J)X^^ + (14498520 - 663J)X^^ 
+(187807764 + 6331J)X52 (744537296 - 35763 J)^^! 
+ (-6562036+ 106392 J)X50 + (-3840625568 - 18070 J)^*^ 
+ (1058251610 - 1082016 J)X48 + (10302034600 + 3516903 J)^^^ 
+(4510900472- 1278901J)X''s+ (-34331690432- 18277116 J)^'^^ 
+ (-7097865034 + 40532700 J)X44+ (84188024320+ 11574823 J)X43 
+ (546780176- 161476962 J)X42+ (-154959173464+ 168751479 J)X4i 
+ (-12359340101 + 230086922 J)X4" + (327081484064- 617987682 J)^^^ 
+ (-49301838300+ 137626281J)X3*+ (-576339027576 +928366231J)X37 
+ (284363953068- 959457720 J)X36 + (735938431592 - 477589944 J)^^^ 
+(-558265224452 + 1429130144 J)^^^ + (-890017323520 - 466517064 J)X33 
+ (977815434427 - 963208272 J)X32 + (966995235128 + 909996295 J)^^! 
+ (-1755072840368+ 158515461J)X30 + (-345165085024- 607329720 J)^^^ 
+(2218368968890+ 197238236 J)^^* + (-911733108784+ 179445279 J)^^^ 
+ (-1540031876048- 140684622 J)X26 + (1628026178168- 6888479 J)^^^ 
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+(261124933147+ 37909092 J)X24 + (-1229692547200- 8835450 J)^^^ 

+ (462040501468- 4070053 J)X22 + (441029439032 + 1885689 J)X2i 
+(-422841966612 + 44928 J)X20+ (-7261052136- 111436 J)Xi9 
+(163453863300+ 9516 J)Xi8 + (-59787354976+ 740 J)Xi^ 
+ ( J2 - 1486 J - 26470898021)Xi6 + (24009911816 - 'i9J)X^^ 
+(-1731574864+ 29J)X'^'^ + (-3926472080 + 246 J)^!^ 
+(1333660406- 364 J)Xi2 + (158103088 - 221J)Xii 
+(-172600168 + 650 J)Xi" + (25597000 - 221 J)^" 
+(5195450 - 364 J)X8 + (-2155088 + 247 J)X^ + (177164 + 26 J)^^ 
+(39936 - 52J)X^ + (-9996 + 13J)X'^ + (600 - J)X^ + 88^^ - 16X + 1, 
Hb,n{X) = X^- 2X3 _ x2 + 2X - 1. 

It is noted the degree of the $3 i3(X, J) in J is 2. We take a prime number i = 3593, 
which sphts completely in K^. Then Hb,n{X) decomposes into linear factors over 
as follows. 

Hb,n{X) = (X-607)(X-166)(X-3428)(X-2987) (mod 3593). By substituting 
the roots of Hb,n{X) (mod 3593) into $3^i3(X, J), we have 

$3,13(607, J) = (J - 229)^ (mod 3593), 

$3,13(166, J) = (J - 2979)2 (mod 3593), 

$3,13(3428, J) = (J - 2874)2 (mod 3593), 

$3,13(2987, J) = (J - 2696)2 (mod 3593). 

Let D{X) be the discriminant of $3,13 (X, J) as a polynomial in J. Then we see 
D{X) = mod Hb,n{X). This means that ^3^i3{lxip^ p,^{aq.), J) has still a multiple 
root for every form q, G 9T_b. Thus we also have J{clc^^) = J{WN{ciq^)) for every i. 
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